DeutschShown in its original language — a full translation is planned for a future version.
UEFI BIOS: Mehrere Schwachstellen
view advisory published 2023-12-06
Ein lokaler Angreifer kann mehrere Schwachstellen im UEFI BIOS verschiedener Hersteller ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen oder einen Denial of Service Zustand herbeizuführen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-5058US | high7.8 | — | ||
Improper Input Validation in the processing of user-supplied splash screen during system boot in Phoenix SecureCore™ Technology™ 4 potentially allows denial-of-service attacks or a… | ||||
| CVE-2023-40238US | medium5.5OT elevated | — | ||
A LogoFAIL issue was discovered in BmpDecoderDxe in Insyde InsydeH2O with kernel 5.2 before 05.28.47, 5.3 before 05.37.47, 5.4 before 05.45.47, 5.5 before 05.53.47, and 5.6 before… | ||||
| CVE-2023-39539US | high7.8 | Exploit | ||
AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a PNG Logo file with dangerous type by Local access. A successful exploit of this vuln… | ||||
| CVE-2023-39538US | high7.8 | — | ||
AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a BMP Logo file with dangerous type by Local access. A successful exploit of this vuln… | ||||
02
references
External citations — patches, advisories, analysis.
- Binarly Research "LogoFAIL" vom 2023-12-06external
- GitHub Security Advisory GHSA-87fm-wcxm-mcmx vom 2023-12-06external
- GitHub Security Advisory GHSA-xhch-7j88-pg68 vom 2023-12-06external
- HP Security Bulletin HPSBHF03950 vom 2024-06-07external
- Lenovo Security Advisory LEN-145284 vom 2023-12-06external
- WID-SEC-W-2023-3068 - CSAF Versionself
- WID-SEC-2023-3068 - Portal Versionself
- Dell Security Advisory DSA-2024-455 vom 2024-12-16external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan